Privacy Policy

Effective date: July 1, 2026  ·  Last updated: July 2026

This Privacy Policy explains how CHG Fulfillment collects, uses, discloses, and safeguards personal information, and the rights and choices available to you. Please read it alongside any additional notice we provide at the point we collect your information.

1. Introduction & scope

This Policy applies to personal information we process about visitors to chgfulfillment.com (the "Site"), prospective and current clients, and other individuals who interact with CHG Fulfillment ("CHG," "we," "us," or "our") in connection with our third-party logistics and order-fulfillment services (the "Services"). It does not apply to third-party websites or services we do not control. CHG Fulfillment is organized and incorporated under the laws of the State of New Jersey and operates from its facility in Morristown, New Jersey, USA. By using the Site or submitting information to us, you acknowledge this Policy.

2. Key definitions

"Personal information" means information that identifies, relates to, or could reasonably be linked with a particular individual or household. "Processing" means any operation performed on personal information. "Service providers" are third parties that process personal information on our behalf and under our instructions. Terms such as "sale," "sharing," and "sensitive personal information" have the meanings given under applicable privacy laws.

3. Information we collect

We collect personal information you provide directly, information collected automatically as you use the Site, and information from third parties, including:

• Identifiers & contact data — name, business/store name, email address, phone number, IP address (from you and automatically).
• Commercial & business information — order volume, product types, package weight, shipping profile, current carriers/rates, services requested (from you).
• Internet & network activity — pages viewed, clicks, referring URLs, session data, browser and device information (collected automatically via cookies & similar technologies).
• Approximate geolocation — general location inferred from IP address (automatic).
• Communications — messages, call and email correspondence, booking details (from you).
• Inferences — marketing segments and interests derived from the above (derived; third-party analytics/ads).

We do not intentionally collect sensitive personal information (such as government IDs, financial account credentials, or health data) through the Site, and we ask that you not submit it via our forms.

4. How & why we use your information

We process personal information for the purposes below. Where the EU/UK GDPR applies, our legal basis for each purpose is noted.

• Responding to quote requests and inquiries; preparing and delivering quotes — performance of a contract / pre-contract steps.
• Providing, operating, and improving the Services and the Site — legitimate interests; performance of a contract.
• Sending service updates and, where permitted, marketing communications — consent; legitimate interests.
• Analytics and advertising, including measuring and improving campaigns — consent (where required); legitimate interests.
• Securing the Site and preventing fraud and abuse — legitimate interests.
• Complying with legal, tax, and regulatory obligations — legal obligation.

5. Cookies & tracking technologies

We and our providers use cookies, pixels, and similar technologies to operate the Site, remember preferences, measure performance, and support advertising. Where required by law, we request consent before setting non-essential cookies.

• Strictly necessary — enables core functionality and security. Cannot be switched off.
• Analytics — helps us understand usage and improve the Site (e.g., Google Analytics).
• Advertising — measures and supports our ads and reaches relevant audiences (e.g., Google Ads).
• Preferences — remembers your settings and choices.

You can manage cookies through your browser and, where offered, our cookie banner. Because there is no consistent industry standard, we do not currently respond to "Do Not Track" browser signals, but we honor recognized opt-out preference signals (such as Global Privacy Control) where required by law.

6. How we disclose your information

We do not sell your personal information for money. We disclose it only as described here:

• Service providers — vendors that operate on our behalf under contract, such as our web-form and lead-processing provider, hosting and email services, analytics and advertising platforms, and shipping carriers.
• Advertising partners — we may "share" limited online identifiers for cross-context behavioral advertising via cookies; you may opt out (see Sections 5 and 11).
• Legal, safety & compliance — where reasonably necessary to comply with law or legal process, enforce our terms, or protect the rights, property, or safety of CHG, our clients, or others.
• Corporate transactions — in connection with a merger, financing, acquisition, or sale of assets, subject to this Policy.

7. Marketing communications & choices

If you request a quote or opt in, we may send you relevant communications about our Services. You can opt out at any time by using the unsubscribe link in our emails or by contacting us. We will still send necessary non-promotional messages related to your requests or account.

8. Data retention

We retain personal information only as long as necessary for the purposes described in this Policy — including to respond to your requests, provide the Services, and satisfy legal, tax, accounting, or reporting requirements — after which we delete or de-identify it. Retention periods vary based on the type of information and the reason we hold it.

9. Data security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, or misuse, and we limit access to those who need it. No system is completely secure, so we cannot guarantee absolute security; you share information with us at your own risk and should protect your own credentials.

10. Your privacy rights

Depending on your location, you may have some or all of the following rights: to access and obtain a copy of your personal information; to correct inaccurate information; to delete your information; to object to or restrict certain processing; to withdraw consent; to data portability; and to be free from discrimination for exercising your rights. To make a request, contact us using Section 17. We will verify your request and respond within the timeframe required by applicable law. You may use an authorized agent where permitted.

11. Your California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know the categories and specific pieces of personal information we collect, use, and disclose; to request deletion or correction; to opt out of the "sale" or "sharing" of personal information; and to limit the use of sensitive personal information. We have collected the categories in Section 3 over the past 12 months and disclosed certain categories to service providers and advertising partners for the purposes in Sections 4 and 6.

To exercise these rights, email us at the address in Section 17 with "California Privacy Request" in the subject line. We will verify your identity before responding and may ask for information to do so.

12. Other U.S. state privacy rights

Because we are based in New Jersey, residents of New Jersey have rights under the New Jersey Data Privacy Act (NJDPA) to access, correct, delete, and obtain a portable copy of their personal information, and to opt out of targeted advertising, the sale of personal data, and certain profiling. Residents of other states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, and others as they take effect) generally have comparable rights. You may exercise these rights, and appeal a decision, by contacting us as described in Section 17.

13. International data transfers

We are based in New Jersey, United States, and we process and store information in the U.S. If you access the Site from outside the U.S., your information will be transferred to and processed in the U.S., where data-protection laws may differ from those in your country. Where required, we implement appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

14. Children's privacy

The Site and Services are intended for businesses and are not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, please contact us and we will delete it.

15. Third-party links & services

The Site may link to or integrate with third-party websites and services (for example, ecommerce platforms or carriers). We are not responsible for their content or privacy practices, and we encourage you to review their policies before providing information.

16. Changes to this Policy

We may update this Policy periodically to reflect changes in our practices or the law. We will revise the "Last updated" date and, where appropriate, provide additional notice. Material changes will be posted on this page, and your continued use of the Site after changes take effect constitutes acceptance.

17. How to contact us

For questions, requests, or complaints regarding this Policy or your personal information, contact the data controller:

This Policy is governed by the laws of the State of New Jersey, USA, without regard to its conflict-of-laws principles. If you are in the EEA or UK and believe we have not addressed your concern, you may have the right to lodge a complaint with your local data-protection authority.